Xcellink Pte

Enterprise ICT operations management provider

Cybersecurity Incident Responder

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeSingaporeNo salary listedIn-person

About the Job

Requirements

Strong expertise in incident response, threat hunting, and forensic analysis.
Experience with security information and event management tools, such as Elastic and Splunk.
Proficiency in network security, malware analysis, and log analysis.
Familiarity with cloud security across AWS, Azure, and Google Cloud Platform, and with container security.
Experience with cloud security tools and AI-powered security analytics, including AWS GuardDuty, Azure Sentinel, and Google Chronicle.
Familiarity with machine-learning-driven anomaly detection and behavioural analysis techniques.
Knowledge of security solutions including endpoint detection and response, extended detection and response, network detection and response, web application firewalls, proxies, firewalls, and email security.
Scripting and automation skills in Python, PowerShell, and Bash.
Deep understanding of the MITRE ATT&CK framework, the cyber kill chain, and machine learning models for cybersecurity applications.
Excellent communication and report-writing skills, and ability to work under pressure.

Responsibilities

Lead the response to cybersecurity incidents, including malware infections, data breaches, and insider threats.
Perform real-time and retrospective analysis of security events to identify threats, and coordinate with managed security service provider security operations centre teams for monitoring and alerting.
Develop and document incident response plans and playbooks.
Handle incidents end to end.
Conduct proactive threat hunting to identify unknown threats.
Perform digital forensic analysis on compromised systems to determine root causes.
Use forensic tools to collect and analyse logs, memory dumps, and disk images.
Work with security information and event management tools to detect anomalous behaviour.
Analyse logs from firewalls, intrusion detection and prevention systems, endpoint protection, and cloud security tools.
Improve detection capabilities by tuning security alerts and developing new rules.
Recommend and implement security controls to reduce exposure.
Provide technical leadership to junior incident responders and security analysts.

Cybersecurity Incident Responder - (EL-FNP250819 008/01)

Xcellink Pte Ltd · Singapore, Singapore · — · Posted 2025-08-19

Workplace: on_site

Department: Business Operations

Description

Lead the response to cybersecurity incidents, including malware infections, data breaches, and insider threats.
Perform real-time and retrospective analysis of security events to identify threats Coordinate with MSSP Security Operations Centre (SOC) teams for monitoring and alerting.
Develop and document incident response plans and playbooks.
Should be expertise on handling the incidents end to end.
Conduct proactive threat hunting to identify unknown threats.
Perform digital forensic analysis on compromised systems to determine root causes.
Use forensic tools to collect and analyse logs, memory dumps, and disk images.
Work with SIEM (Security Information and Event Management) tools to detect anomalous behaviour.
Analyse logs from firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and cloud security tools.
Improve detection capabilities by tuning security alerts and developing new rules.
Recommend and implement security controls to reduce exposure.
Provide technical leadership to junior incident responders and security analysts

Requirements

Strong expertise in incident response, threat hunting, and forensic analysis.
Experience with SIEM tools (e.g., Elastic, Splunk).
Proficiency in network security, malware analysis, and log analysis.
Familiarity with cloud security (AWS, Azure, GCP) and container security.
Experience with cloud security tools and AI-powered security analytics (AWS Guard Duty, Azure Sentinel, Google Chronicle).
Familiarity with AI/ML-driven anomaly detection and behavioural analysis techniques.
Knowledge of security solutions ( EDR,XDR,NDR,WAF,Proxy,Firewall,Email Security).
Scripting and automation skills (Python, PowerShell, Bash).
Deep understanding of MITRE ATT&CK framework, cyber kill chain, and machine learning models for cybersecurity applications.
Excellent communication and report-writing skills and ability to work under pressure scenarios

Apply

Apply at Xcellink Pte Ltd

About the Company

Xcellink Pte

Enterprise ICT operations management provider

Xcellink Pte provides enterprise ICT operations management and enterprise solutions for global growth, local enterprises, and government-linked organizations. It delivers and runs IT services by managing data centre, network operations, security, helpdesk, onsite field services, applications support, and asset staging; it builds client operational teams from scratch and can offshore delivery to Malaysia, the Philippines, Indonesia, and India, scaling to hundreds of IT professionals. It differentiates itself through its long track record, ability to design end-to-end operations and offer analytics-driven enterprise solutions plus talent-search services for technology hiring. Its goal is to help clients achieve reliable IT delivery, optimize operations, and access skilled resources and innovative ideas as technology markets evolve.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Singapore, Singapore
Founded: 1993

Recently Posted Jobs

Explore more opportunities at Xcellink Pte

See more jobs